CVE-2016-0230

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.

CVSS v3 6.8 MEDIUM
CVSS v2.0 7.2 HIGH

6.8^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387	Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027	Vendor Advisory
http://www.securityfocus.com/bid/91535	Third Party Advisory VDB Entry
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387	Patch Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027	Vendor Advisory
http://www.securityfocus.com/bid/91535	Third Party Advisory VDB Entry
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html	Vendor Advisory
https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:7.9.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2::::::
	cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3::::::

Configuration 2 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.1.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2::::::
	cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3::::::

Configuration 3 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.2.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2::::::

Configuration 4 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.3.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2::::::

Configuration 5 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:7.3.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5::::::
	cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7::::::

Configuration 6 (hide)

OR	cpe:2.3:a:ibm:hardware_management_console:8.4.0:-::::::
	cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1::::::

Configuration 7 (hide)

cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*

History

21 Nov 2024, 02:41

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387 - Patch, Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387 - Patch, Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026 - Vendor Advisory
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/91535 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/91535 - Third Party Advisory, VDB Entry
References	~~() https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html - Vendor Advisory~~	() https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html - Vendor Advisory
References	~~() https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html - Vendor Advisory~~	() https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html - Vendor Advisory
References	~~() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html - Vendor Advisory~~	() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html - Vendor Advisory
References	~~() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html - Vendor Advisory~~	() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html - Vendor Advisory
References	~~() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html - Vendor Advisory~~	() https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html - Vendor Advisory

Information

Published : 2016-07-07 14:59

Updated : 2025-04-12 10:46

NVD link : CVE-2016-0230

Mitre link : CVE-2016-0230

CVE.ORG link : CVE-2016-0230

JSON object : View

Products Affected

ibm

hardware_management_console

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2016-0230", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "published": "2016-07-07T14:59:00.237", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/91535", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=nas8N1021387", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04021", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04022", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04023", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04024", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04025", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04026", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1MB04027", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/91535", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069vc/2/MH01635.readme.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/069y2/1/MH01636.readme.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1r/2/MH01638.readme.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a1v/2/MH01639.readme.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://delivery04.dhe.ibm.com/sar/CMA/HMA/06a2q/1/MH01640.readme.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors."}, {"lang": "es", "value": "IBM Power Hardware Management Console (HMC) 7.3 hasta la versi\u00f3n 7.3.0 SP7, 7.9 hasta la versi\u00f3n 7.9.0 SP3, 8.1 hasta la versi\u00f3n 8.1.0 SP3, 8.2 hasta la versi\u00f3n 8.2.0 SP2, 8.3 hasta la versi\u00f3n 8.3.0 SP2, 8.4 hasta la versi\u00f3n 8.4.0 SP1 y 8.5.0 permite a atacantes f\u00edsicamente pr\u00f3ximos obtener acceso de root a trav\u00e9s de vectores no especificados."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "374E33CA-EBEF-49FB-B941-07118D3A6D7E"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F702523-55BE-4743-88F3-DB1539269D2C"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA2834CF-DFDF-4BEA-9BE0-BD1C11C918D6"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.9.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDB8E8D9-2AE1-48D5-9F71-99BC3F97066D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C37D81D-56E4-4AED-AD5E-1ED483535849"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33DA50CC-EE92-4386-B2E2-25DDB7B39984"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6F97979-8DE1-49FA-BD67-424655913D78"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.1.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8135B772-98EE-484E-87F3-3C4CD7AF41F5"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76F757D9-6B24-4B9D-B584-143E523F1AC6"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EA06BD4-ADFB-4419-BD0D-DC2B35A05C1B"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.2.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B09B0AE3-AF65-4821-9CE1-4D06BB937A1F"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3406E93-1C05-4D55-B52F-0C95E1635365"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7D67F4F-5E80-44C8-95F4-044BB54CADFF"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.3.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17A95F76-30EA-45CC-AA46-5AA3CAB8B668"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1E0BDA3-FF99-49FC-A89B-64789A4D6AE8"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76115CAB-E39D-4F7F-AE6C-5B234AE6C23F"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56BACDE1-5CC6-4692-AEAD-66F4A8A5DF9A"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C3ACD74-718E-40E1-B38C-01EAE90A0253"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:7.3.0:sp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEC79BEA-AB54-42E5-89C3-1153A8A2105A"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B147086F-706C-4C62-B7FA-EE20F5A222D9"}, {"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.4.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BF354DF-8ADB-41D7-B990-5B5597817401"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:hardware_management_console:8.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42172521-C8D9-47C1-9A43-5A54A6A247F5"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}

6.8 /10